Dell PowerConnect 5548 User Guide - Page 30

Access Control Lists (ACL) Access Control Lists (ACL) enable network managers to define classification actions and rules for specific ingress ports. Packets entering an ingress port with an active ACL, are either admitted or denied entry and the ingress port is disabled. If they are denied entry, the user can disable the port. Dynamic ACL/Dynamic Policy Assignment (DACL/DPA) The network administrator can specify the user's ACL in the RADIUS server. After successful authentication, the user is assigned that ACL. For more information, see "Network Security" on page 92. DHCP Snooping DHCP Snooping expands network security by providing firewall security between untrusted interfaces and DHCP servers. By enabling DHCP Snooping, network administrators can differentiate between trusted interfaces connected to end-users or DHCP servers and untrusted interfaces located beyond the network firewall. For more information, see "DHCP Snooping" on page 564. ARP Inspection Dynamic ARP inspection is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-inthe-middle attacks. Port Profile (CLI Macro) Macros provide a convenient way to save and share a common configuration. A macro is a set of CLI commands with a unique name. When a macro is applied to a port, the CLI commands contained within it are executed and added to the Running Configuration file. For more information, see "Dynamic ARP Inspection" on page 551. 30 Dell PowerConnect 55xx Systems User Guide